CreateRestorePoint: 
HKLM-x32\...\RunOnce: [360safeuninst_1f0fb7c2d13cc0c07ff2ca40747bc03e] => C:\Users\Craig\AppData\Local\Temp\1f0fb7c2d13cc0c07ff2ca40747bc03e_remove360.bat [592 2015-09-23] () <===== ATTENTION
HKU\S-1-5-21-4156386708-1275281542-3633067309-1000\...\Run: [POEngine5] => [X]
HKU\S-1-5-21-4156386708-1275281542-3633067309-1000\...\Run: [Boxoft Tools] => "C:\ProgramData\Boxtools\Boxofttoolbox.exe" -autorun
HKU\S-1-5-21-4156386708-1275281542-3633067309-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://blekko.com/ws/?source=c3348dd4&toolbarid=blekkotb_031&u=1425779390C145C01606F6505A7F13B6&tbp=homepage
Toolbar: HKU\S-1-5-21-4156386708-1275281542-3633067309-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
FF SearchEngineOrder.1: Blekko
FF SelectedSearchEngine: Blekko
CHR HomePage: Default -> hxxp://blekko.com/ws/?source=c3348dd4&toolbarid=blekkotb_031&u=1425779390C145C01606F6505A7F13B6&tbp=homepage
CHR StartupUrls: Default -> "hxxp://blekko.com/ws/?source=c3348dd4&toolbarid=blekkotb_031&u=1425779390C145C01606F6505A7F13B6&tbp=homepage","hxxp://feed.snap.do/?publisher=Download&dpid=Download&co=CA&userid=fda45b49-8ef7-439e-a3cb-c8884eeb042a&searchtype=hp"
R3 360AvFlt; system32\DRIVERS\360AvFlt.sys [X]
R3 360Box64; system32\DRIVERS\360Box64.sys [X]
2015-09-22 21:34 - 2015-09-23 18:57 - 00000000 __SHD C:\$360Section
2015-09-22 21:33 - 2015-09-23 18:57 - 00000000 ____D C:\ProgramData\360Quarant
2015-09-23 20:09 - 2012-11-08 20:42 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin
2015-09-23 20:07 - 2015-07-24 21:08 - 00000000 ____D C:\ProgramData\360safe
2015-09-10 16:12 - 2014-03-02 21:59 - 00000000 ____D C:\Program Files\360
C:\Users\Craig\AppData\Local\Temp\1f0fb7c2d13cc0c07ff2ca40747bc03e_remove360.bat
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON 
CMD: ipconfig /flushdns 
CMD: netsh winsock reset catalog
CMD: netsh int ip reset c:\resetlog.txt 
CMD: ipconfig /release
CMD: ipconfig /renew 
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
RemoveProxy:
EmptyTemp: 
CMD: bitsadmin /reset /allusers